Personal data management policy

The purpose of this privacy policy is to inform you in a clear, simple and transparent manner of the processing carried out on the personal data that you entrust to us, or that we may be led to collect during your browsing on our website www.my-origines.com (hereinafter the "Site"), of their possible transfer to third parties, and of the rights and options available to you to control your personal information and protect your privacy.

DIVABOX, SAS DIVABOX, a simplified joint stock company with a capital of 40,000 Euros, registered with the RCS of AJACCIO under the number 301 242 772 001 37, whose registered office is located at 20090 AJACCIO is responsible for processing the personal data collected on the Site within the meaning of the applicable regulations on personal data and in particular Law No. 78-17 of 6 January 1978 known as "Informatique et Libertés" and EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter "GDPR").

DIVABOX collects and processes your data in order to:

• - enable you to create an account on our Site and to subscribe to our newsletter;
• - manage your access to your account on the Site;
• - process and manage orders placed with DIVABOX;
• - Manage the payment of your order;
• - Ensure the delivery of the products and services you order;
• - Ensure the security of online transactions, prevent fraud, payment incidents and manage collections (see our Terms and Conditions of Sale for more details), in particular through the automated processing of your data;
• - To manage the member relationship in the context of requests for information or complaints that you may send us via our website;
• - To trace and manage product recalls and withdrawals;
• - To carry out marketing operations (loyalty, promotions) and to send e-mail advertisements to our customers who have not objected or who have accepted it :
• • On products similar to those they have ordered. Carry out statistical analyses to develop steering, measurement and reporting tools to adapt and improve our sales and marketing activities;
• • On other products offered by the company. For example, if a customer buys a dress, a body cream may be offered.
• - Transmit the data of our customers who have accepted it to our commercial partners, to enable them to send them advertising (see below).
• - Ensure the exercise of your rights in accordance with this Notice;

DIVABOX informs you that you may at any time modify your choices in terms of communications on the Site, via the NEWSLETTER section of your account.

We may collect your personal data during :

• - The creation of your member account on our Site,
• - Placing an order on the Site;
• - The payment of your order;
• - Subscribing to our newsletter;
• - Your answers to surveys or satisfaction surveys about your customer experience;
• - Your participation in a competition or other event that we organise;

In the course of our business we may collect certain data directly from you for the purposes detailed in Section II of this Policy.

The information we may collect from you is as follows :

• - Identity: title, surname, first name, address, delivery address, telephone number, e-mail address, date of birth, internal processing code allowing customer identification, data relating to registration on opposition lists.
• Data relating to orders: transaction number, details of purchases, amount of purchases, data relating to the settlement of invoices (payments, outstanding payments, discounts), return of products.
• - Information relating to your means of payment when you place an order on our Site. Please note that your bank details do not pass in clear text on DIVABOX's servers. Payments are made via a secure payment platform provided by HiPay SAS, a simplified joint stock company with a capital of 1,014,561 euros, whose registered office is located at 94 Rue de Villiers, 92300 Levallois-Perret, registered with the Paris Trade and Companies Register under number 390 334 225.
• Information that you may need to communicate to our Customer Service Department in order to manage your requests for information or your complaints;
• - Information that you provide when you leave an opinion on a product or service on our Site;
• - Data necessary to carry out loyalty and prospecting actions: purchase history.

Order management: the legal basis of the processing is the performance of a contract (see Article 6.1.b) of the European Data Protection Regulation).

Sending newsletters, commercial solicitations by e-mail on products similar to those ordered by customers: the legal basis of the processing is the legitimate interest of the company (Cf. article 6.1.f) of the European Data Protection Regulation), i.e. to promote our products to our customers.

Sending newsletters, commercial solicitations by e-mail about other products offered by DIVABOX to customers: the legal basis of the processing is consent (Cf. article 6.1.a) of the European Data Protection Regulation), as required by article L. 34-5 of the French Postal and Electronic Communications Code.

Sending newsletters, commercial solicitations by email to non-customers: the legal basis of the processing is consent (Cf. article 6.1.a) of the European Data Protection Regulation), as required by article L. 34-5 of the French Post and Electronic Communications Code.

Your personal data is processed by DIVABOX staff. We ensure that only authorised persons within DIVABOX can access your personal data when this is necessary for the purposes of managing our business relationship or our legal obligations.

We may also disclose your personal data to subcontractors such as:

• - Our hosting and maintenance service providers for the site and our dematerialised solutions for collecting personal data;
• - Our payment service providers;
• - Our fraud prevention and control service providers;
• - Our transport service providers;
• - Our business development management and social network communication service providers;

DIVABOX may also communicate your data to third parties to comply with legal, regulatory or contractual obligations, or to respond to requests from the legally authorised authorities.

Data required for order management and invoicing: for the entire duration of the business relationship and ten (10) years for accounting purposes.

Data required for customer loyalty actions and prospecting: for the entire duration of the commercial relationship and three (3) years from the last purchase.

Data relating to means of payment: this data is not kept by DIVABOX; it is collected during the transaction and is immediately deleted as soon as the purchase is paid for.

Data necessary for the implementation of loyalty actions and canvassing for non-customers: three (3) years from the date of subscription to the newsletter.

Data concerning opposition lists to be received from prospecting: three (3) years.

If you no longer wish to receive advertising from DIVABOX (exercise of the right of opposition or withdrawal of consent already given), please contact us Contact form.



You can access, rectify or have data concerning you deleted. You also have a right to portability and a right to limit the processing of your data (Consult the cnil.fr website for more information on your rights).

To exercise these rights or if you have any questions about the processing of your data in this system, you can contact our DPO.

Contact our Data Protection Officer by e-mail : info@my-origines.com

A cookie is a small file consisting of letters and numbers that is downloaded to your computer when you access certain websites. In general, cookies allow a website to recognise the user's computer.

The most important thing to know about the cookies we set is that they are used to improve the usability of our website, for example by remembering site preferences and language settings.

We may use cookies and similar technologies for a number of reasons, for example: for security or fraud protection purposes, and to identify and prevent cyber-attacks, to provide you with the service you have chosen to receive from us, to monitor and analyse the performance, operation and effectiveness of our service and to improve your user experience.

These cookies are necessary for the website to function and cannot be switched off in our systems. They are usually only set in response to actions made by you which amount to a request for services, such as setting your privacy preferences, logging in or filling in forms. You can set your browser to block or alert you about these cookies, but some parts of the site will not then work. These cookies do not store any personally identifiable information.

These cookies allow us to determine the number of visits and sources of traffic, in order to measure and improve the performance of our website. They also help us to identify the most/least visited pages and to evaluate how visitors navigate the website. All information collected by these cookies is aggregated and therefore anonymised. If you do not accept these cookies, we will not be informed of your visit to our site.

These cookies are used to improve and personalise the functionality of the website. They may be set by our staff, or by third parties whose services are used on our website pages. If you do not accept these cookies, some or all of these services may not function properly.

These cookies may be set within our website by our advertising partners. They may be used by these companies to profile your interests and serve you relevant advertisements on other websites. They do not store personal data directly, but are based on the unique identification of your browser and Internet device. If you do not allow these cookies, your advertising will be less targeted.

To learn more about cookies, including how to see what cookies have been set and how to manage, delete or block them, visit https://aboutcookies.org/. It is also possible to prevent your browser from accepting cookies by changing the relevant settings in your browser. You can usually find these settings in the "Options" or "Preferences" menu of your browser. Please note that deleting our cookies or disabling future cookies or tracking technologies may prevent you from accessing certain areas or features of our services, or may otherwise adversely affect your user experience.

To opt-out and prevent your data from being used by Google Analytics on all websites, see the following instructions: https://tools.google.com/dlpage/gaoptout?hl=fr.

We may change this cookie policy from time to time. We encourage you to check this page regularly for the latest information on cookies.